CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 231:

  Which of the following is NOT an identity source used for Identity Awareness?

  A. Remote Access
  B. UserCheck
  C. AD Query
  D. RADIUS
  B. UserCheck

  ---

  Explanation/Reference:

  Reference: https://www.checkpoint.com/products/identity-awareness-software-blade/

• Question 232:

  What is the command to see cluster status in cli expert mode?

  A. fw ctl stat
  B. clusterXL stat
  C. clusterXL status
  D. cphaprob stat
  A. fw ctl stat

• Question 233:

  Where would an administrator enable Implied Rules logging?

  A. In Smart Log Rules View
  B. In SmartDashboard on each rule
  C. In Global Properties under Firewall
  D. In Global Properties under log and alert
  B. In SmartDashboard on each rule

• Question 234:

  Which tool allows you to monitor the top bandwidth on smart console?

  A. Smart Event
  B. Gateways and Servers Tab
  C. SmartView Monitor
  D. Logs and Monitoring
  C. SmartView Monitor

• Question 235:

  Which is NOT an encryption algorithm that can be used in an IPSEC Security Association (Phase 2)?

  A. AES-GCM-256
  B. AES-CBC-256
  C. AES-GCM-128
  B. AES-CBC-256

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_VPN_AdminGuide/13847

• Question 236:

  Is it possible to have more than one administrator connected to a Security Management Server at once?

  A. Yes, but objects edited by one administrator will be locked for editing by others until the session is published.
  B. Yes, but only if all connected administrators connect with read-only permissions.
  C. Yes, but only one of those administrators will have write-permissions. All others will have read-only permission.
  D. No, only one administrator at a time can connect to a Security Management Server.
  A. Yes, but objects edited by one administrator will be locked for editing by others until the session is published.

• Question 237:

  Fill in the blank: In order to install a license, it must first be added to the _____.

  A. Package repository
  B. Download Center Web site
  C. License and Contract repository
  D. User Center
  C. License and Contract repository

• Question 238:

  Fill in the blanks: A High Availability deployment is referred to as a ______ cluster and a Load Sharing deployment is referred to as a ________ cluster.

  A. Standby/standby; active/active
  B. Active/active; standby/standby
  C. Active/active; active/standby;
  D. Active/standby; active/active
  D. Active/standby; active/active

  ---

  Explanation/Reference:

  In a High Availability cluster, only one member is active (Active/Standby operation).

  ClusterXL Load Sharing distributes traffic within a cluster so that the total throughput of multiple members is increased. In Load Sharing configurations, all functioning members in the cluster are active, and handle network traffic (Active/Active

  operation).

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ClusterXL_WebAdminGuide/7292.htm

• Question 239:

  What is the purpose of Captive Portal?

  A. It provides remote access to SmartConsole
  B. It manages user permission in SmartConsole
  C. It authenticates users, allowing them access to the Internet and corporate resources
  D. It authenticates users, allowing them access to the Gaia OS
  C. It authenticates users, allowing them access to the Internet and corporate resources

  ---

  Explanation/Reference:

  Captive Portal ?a simple method that authenticates users through a web interface before granting them access to Intranet resources. When users try to access a protected resource, they get a web page that must be filled out to continue. Reference : https://www.checkpoint.com/products/identity-awareness-software-blade/

• Question 240:

  What are valid authentication methods for mutual authenticating the VPN gateways?

  A. Pre-shared Secret and PKI Certificates
  B. PKI Certificates and Kerberos Tickets
  C. Pre-Shared Secrets and Kerberos Ticket
  D. PKI Certificates and DynamicID OTP
  A. Pre-shared Secret and PKI Certificates